CVE-2002-0176

Published: Apr 22, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

Affected (7)

Products: Avaya: Libsafe

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Avaya Libsafe	Version 1.3.4
Avaya Libsafe	Version 1.3.8
Avaya Libsafe	Version 2.0.10
Avaya Libsafe	Version 2.0.11
Avaya Libsafe	Version 2.0.2
Avaya Libsafe	Version 2.0.5
Avaya Libsafe	Version 2.0.9

References (10)

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/263121

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.iss.net/security_center/static/8594.php

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/4327

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.securityfocus.com/archive/1/263121

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.iss.net/security_center/static/8594.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/4327

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.